https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T20:16:57.677886+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2008-0128 CVE-2008-0128 2026-10-03T20:16:57.693541+00:00

The SingleSignOn Valve (org.apache.catalina.authenticator.SingleSignOn) in Apache Tomcat before 5.5.21 does not set the secure flag for the JSESSIONIDSSO cookie in an https session, which can cause the cookie to be sent in http requests and make it easier for remote attackers to capture this cookie.